Behavioral task
behavioral1
Sample
9a1f0561e45ce6e7719a52e9ca7741c0_exe32.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
9a1f0561e45ce6e7719a52e9ca7741c0_exe32.exe
Resource
win10v2004-20230915-en
General
-
Target
9a1f0561e45ce6e7719a52e9ca7741c0_exe32.exe
-
Size
2.9MB
-
MD5
9a1f0561e45ce6e7719a52e9ca7741c0
-
SHA1
6f3bc58914562e933af50cddb9f0bc44cb9ba257
-
SHA256
5455c4914ce16f95ade7ee8d680926a417e6808508690f30b9bd204f8459c625
-
SHA512
4ca1df3f8aa689542df1223f2229e691a748e3481e21734aeb95b0cc34ba6d7c5adf43bb610da6c470b0c819e76bc3fe9da51332152f4a29d251dbc95ae17e31
-
SSDEEP
49152:KSVNDG4T++jqrFXu2Xrh5HMAQBHrR6d2SdmbT/02tjWVBaKmVRVtsVZ5G1oM:1yE++jqB+2XgHEdlmbb94BPmrnsVZ5Gz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9a1f0561e45ce6e7719a52e9ca7741c0_exe32.exe
Files
-
9a1f0561e45ce6e7719a52e9ca7741c0_exe32.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 4.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 307KB - Virtual size: 308KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE